What’s Vulnerable › Vulnerabilities
CVE-2018-9056
- Severity: medium (CVSS 5.6 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2018-03-27 · updated 2026-06-17
- Weakness: CWE-200
Description
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
Affected products
- Arm Cortex-A: 9, 15, 17, 57, 72, 73 (+1)
- Intel Atom C: c2308, c2316, c2338, c2350, c2358, c2508 (+26)
- Intel Atom E: e3805, e3815, e3825, e3826, e3827, e3845
- Intel Atom X3: c3130, c3200rk, c3205rk, c3230rk, c3235rk, c3265rk (+3)
- Intel Atom Z: z2420, z2460, z2480, z2520, z2560, z2580 (+24)
- Intel Celeron J: j1750, j1800, j1850, j1900, j3060, j3160 (+4)
- Intel Celeron N: n2805, n2806, n2807, n2808, n2810, n2815 (+17)
- Intel Core I3: 330e, 330m, 330um, 350m, 370m, 380m (+106)
- Intel Core I5: 430m, 430um, 450m, 460m, 470um, 480m (+163)
- Intel Core I7: 7y75, 610e, 620le, 620lm, 620m, 620ue (+162)
- Intel Core M: 5y10, 5y10a, 5y10c, 5y31, 5y51, 5y70 (+1)
- Intel Core M3: 6y30, 7y30, 7y32
- Intel Core M5: 6y54, 6y57
- Intel Core M7: 6y75
- Intel Pentium J: j2850, j2900, j3710, j4205
- Intel Pentium N: n3510, n3520, n3530, n3540, n3700, n3710 (+1)
- Intel Xeon: e5502, e5503, e5504, e5506, e5507, e5520 (+63)
- Intel Xeon Bronze 3104: all versions
- Intel Xeon Bronze 3106: all versions
- Intel Xeon E-1105C: all versions
- Intel Xeon E3: 1505m_v6, 1515m_v5, 1535m_v5, 1535m_v6, 1545m_v5, 1558l_v5 (+5)
- Intel Xeon E3 1105C V2: all versions
- Intel Xeon E3 1125C: all versions
- Intel Xeon E3 1125C V2: all versions
- Intel Xeon E3 1220: all versions
- Intel Xeon E3 12201: all versions
- Intel Xeon E3 12201 V2: all versions
- Intel Xeon E3 1220 V2: all versions
- Intel Xeon E3 1220 V3: all versions
- Intel Xeon E3 1220 V5: all versions
References
- http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf
- https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks/
- http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf
- https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks/
Get alerted when CVE-2018-9056 or the next vulnerability affects your stack